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(54) Title: METHOD AND SYSTEM FOR ALLOCATING AND REDEEMING INCENTIVE CREDITS 



(57) Abstract 

A customer incentive system involving a plurality of service or merchandise 
providers comprises a customer-carried, portable device (74), a provider device 
(76), and a base device (72). To earn incentive credits, the customer enters into a 
transaction with one of the providers participating in the incentive system (70). A 
transaction amount is derived from the transaction and, based on this amount, 
an incentive credit amount is computed. Hie base device (72) performs this 
computation by deriving an incentive code and cross-referencing this incentive 
code with all customer incentive codes stored on the customer-carried device 
(74) and incentive program codes stored on the provider device (76) to derive 
an incentive rate. This incentive rate is applied to the transaction amount to derive 
the incentive amount The incentive amount is stored on the customer-carried 
device (74). To redeem the incentive credits stored on the customer-carried device 
(74), the customer enters into a second transaction with the same provider or 
another participating provider. A second transaction amount is derived from this 
transaction and the customer may choose to redeem some or all of the incentive 
credits stored on the customer-carried device (74) to lower the transaction amount 
When incentive credits are redeemed, they are subtracted from the incentive amount 
on the customer-carried device (74). By using a customer-carried device (74), 
transactions may be conducted off-line. Thus, no concurrent communications link 
with a central authority is needed. 
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Field of die Invention 

5 This invention relates generally to transaction systems and more particularly to a 

method and system for implementing a multiple provider incentive program in an off-line 
or a selective on-line environment which allows multiple transactions to be processed 
simultaneously for a large number of service and merchanmse rjroviders and producers ' 
(multiple providers). Included in this system is a dynamic allocation system for collecting, 
10 transferring, and distributing funds among participating parties. 

Description of Backpmnnri Art 

A wide variety of customer incentive programs have been developed in the past to 
motivate customers to make purchases from one or a group of service or merchandise 

15 providers. These programs, such as coupon and rebate programs, were effective in 

attracting customers to conduct one-time purchases but, for the most part, were ineffective 
in motivating customers to return to the same provider for future purchases. This "future 
business" aspect is an important part of an effective incentive program. Another important 
aspect of an effective incentive program is variety. Generally, customers want to have a 

20 large number of choices with regard to the products and services they buy. In order to 

have such a variety, a large number of different providers and producers need to participate 
in the incentive program. 

A particular program which has both of the desirable aspects noted above is a 
large-scale credit incentive program, wherein for each purchase transaction, incentive • 
25 credits from multiple providers are computed and awarded to the customer. These 

incentive credits may be redeemed by the customer in a future transaction to pay for all or 
a part of the future transaction amount. The incentive credits may be earned at any 
transaction site and redeemed at any transaction site. Because the incentive credits maybe 
redeemed only in a future transaction, the customer has an incentive to return to make 

30 another purchase from a participating provider. Since the program is large-scale and 

l . 
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hence, encompasses a large number of different providers, the customers arc offered the 
variety they desire. Therefore, such an incentive program should be effective. 

Due to the large number of parties involved, and the simultaneous processing for 
one or more of these parties, an overall system for coordinating the computation, 
5 collection, allocation and redemption of incentive credits is needed in order to implement 
such an incentive program. The implementation of such a system may take one of several 
possible forms. First, the system may be implemented as a centralized system wherein for 
each allocation and redemption of incentive credits, a central authority is concurrently 
contacted to report the results of the transaction and to obtain authorization for the ' 
10 transaction. Such an implementation would require that a communications link be 
established with the central authority each time a transaction is conducted. This 
implementation is slow and inefficient and also imposes a heavy load on communications 
channels. 

As a better alternative, the system may be implemented with a common record- 
15 keeping facility and a plurality of off-line transaction sites. In this system, substantially all 

transactions are conducted off-line, with the results being recorded at the transaction site. 

At some point after the transaction, the results are transmitted to the record-keeping 

facility for posting and account reconciliation. The record-keeping facility is not used as a 

central authority. Rather, authorization of the transaction is done at the transaction site 
20 during the transaction, which means that the transaction is conducted more quickly and 

efficiently. For this reason, this alternative implementation of the system is preferred. 

Currently, however, there is no system believed to be available which implements the 

above-described system safely and effectively. 

25 Summary of the Invention 

In accordance with the present invention, there is provided a system for effectively 
implementing a large-scale incentive program comprising a customer-carried portable 
device (74) for holding customer-specific information, a provider device (76) for holding 
provider-specific information, and a base device (72) for coordinating the interaction of 

30 the customer and provider devices and for providing an environment in which a 
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transaction may be conducted. In the preferred embodiment, the customer device (74) and 
the provider device (76) both take the form of a processor card or "smart card". Each card 
comprises a processor, a read-only memory (ROM) for storing a control program, and a 
non-volatile memory for storing and securing the customer-specific or provider-specific - 
5 information. Together, the three devices hold all of the information needed to conduct 
most transactions. Consequently, there is no need in most transactions to consult a 
common authority, which means that most transactions may be conducted off-line. There 
may be certain situations, however, in which a common authority or multiple authorities ' 
need to be consulted for farther authorization and instructions. Li such instances, the 
10 selective on-line mode of the present invention is invoked to establish a communications 
link with the common or multiple authorities to receive authorization and instructions 
therefrom. This may be done while all other processes are carried out off-line. 

In the system of the present invention, each of the devices preferably cooperates 
with the other devices to carry out the method of the present invention. That is, the 
15 various devices operate interactively to carry out an overall process. By operating in this 
manner, the individual requirements of each of the parties can be taken into account 
In accordance with the method of the present invention, incentive credits are 
allocated and redeemed by first conducting a transaction between a customer and a 
provider. From mis transaction, a transaction amount is derived. After the transaction 
20 amount is derived, an incentive credit total stored in the customer device (74) is checked to 
determine whether it has a zero value. If so, the customer has no incentive credits to 
redeem. However, if incentive credits are stored on the customer device (74), the 
customer is asked whether he wishes to redeem any of the accrued incentive credits, and if 
so, how many. Where an affirmative response is received, a specified number of incentive 
25 crests are redeemed to lower me transaction amount by a discounted amount. The 

number of incentive credits redeemed is subtracted from the incentive credit total stored in 
the customer device (74) to update this total. Thereafter, the number of incentive credits 
earned in the present transaction is computed along with the credit incentives offered by 
additional providers to derive an incentive credit amount. This incentive credit amount is 

30 added to the incentive credit total stored in the customer device (74) to again update the 

3 
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total. The newly earneS incentive credits may be redeemed in a future transaction. 
Incentive credits are thus allocated and redeemed in accordance with the present invention. 

The process described above is performed for each transaction. At the end of each 
transaction, information relating to the transaction such as the transaction amount, the 
5 discounted amount, and the incentive credit amount is stored. Then, at some point after 
the transactions (preferably at the end of each day), the stored information is transmitted to 
a record-keeping facility for records posting and account reconciliation. For each 
incentive credit allocated, funds and/or discounts from participating providers are 
electronically transferred to, or the providers pay a certain amount to, a trust account, and 
10 for each incentive credit redeemed, the provider redeeming the incentive credits receives a 
certain amount from the trust account as agreed upon by prior agreement Funds from the 
incentive program are thus reallocated from provider to provider. 

Brief Description of the Drawing 
15 Fig. 1 is a flow diagram of the steps carried out in allocating incentive credits in 

accordance with the method of the present invention. 

Fig. 2 is a flow diagram of the steps carried out in redeeming and allocating 
additional incentive credits in accordance with the method of the present invention. 

Hg. 3 is a block diagram of a preferred embodiment of the system of the present 
20 invention. 

Figs. 4a-4d provide a flow diagram of the control program 103 executed by the 
base processor 100 of Fig. 3. 

Fig. 5 is a flow diagram of the control program 84 executed by customer processor 
80 of Fig. 3. 

25 Fig. 6 is a flow diagram of the control program 94 executed by provider processor 

90 of Fig. 3. 

Fig. 7 is a flow diagram of the control program 122 executed by RDD processor 
118 of Fig. 3. 

Fig. 8 is a detailed flow diagram of the initialization step 130 shown in Fig. 4a. 
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Hg. 9 is a flow diagram of the selective on-line mode of operation of base 
processor 100 of Fig. 3. 

Detailed Description of the Preferred Rrnhnftt^ntc 
5 Before describing the invention in detail, a brief discussion of the consideration- 

underlying the invention will be provided to facilitate a complete understanding of th* 
invention. One of the objects of the present invention is to provide a system for 
implementing a large-scale customer incentive program. Such a system preferably allows " 
a large number of service and merchandise providers and producers to participate in the 
10 incentive program, and also allows customer/provider transactions to be carried out mostly 
off-line but selectively on-line, if necessary. The off-line aspect of the system gives rise to 
several system considerations. First, because most transactions are preferably carried out 
off-line, no communications link is established with a common authority during most 
transactions. This means mat during most transactions, a common authority cannot be 
15 relied upon to store or to provide information relating to the incentive program. Rather, 
this information needs to be stored in some means which may be accessed during the off- 
line transactions. In view of this consideration, the system of the present invention is 
preferably implemented using a customer device and a provider device. The customer 
device stores and maintains incentive program information relating to a specific customer 
20 while the provider device stores and maintains incentive program information relating to a 
specific provider. Together, these two devices provide most of the information needed to 
carry out a transaction. The customer device is preferably a portable device so that a 
customer may conveniently carry the device from provider to provider. This portability, 
combined with the customer-specific incentive program information stored on the device, 
25 allows the customer device to be used off-line at any transaction site. 

Other considerations prompted by the off-line nature of the system are that of 
computing multiple card files and incentives, and temporary storage of transaction 
information. Since most transactions are performed off-line, information relating to the 
transaction is not transmitted to a record-keeping facility for posting until some time after 

30 the transaction is completed. This means that the transactional information needs to be 

5 
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temporarily stored. Preferably, a base device is used for this purpose. The base device 
preferably also couples to the customer and provider devices to coordinate their 
interaction. Therefore, the system of the present invention preferably comprises a base 
device, a provider device, and a customer-carried portable device. Each of these 
5 components will be described in greater detail in a subsequent section. 

With reference to Figs. 1 and 2, the method of the present invention will now be 
described. Fig. 1 illustrates the steps carried out in an initial transaction wherein incentive 
credits are earned from a first provider, and Eg. 2 shows the steps taken in a subsequent * 
transaction wherein incentive credits are redeemed and earned from a second provider. 
10 The first and second providers may be the same provider or they may be different 

providers participating in the same incentive program. The term provider is used herein to 
mean a transaction partner to the customer. The provider may be an intermediary who 
offers goods and services made or performed by other producers, or the provider may be a 
producer offering its own goods or services. The term provider should be interpreted 
15 broadly. For the sake of clarity, it should be noted here that when incentive credits are 
earned, they are earned not only from the provider participating in the transaction but from 
all of the providers participating in the incentive program. This is due to the manner in 
which funds are reallocated among the providers which grant the incentive credits and the 
providers which redeem the incentive credits (as will be explained later). For the sake of 
20 simplicity, however, incentive credits will be described herein as being granted by the 
provider participating in the transaction. 

The term services should also be interpreted broadly. Services may include 
entertainment, insurance, health care services, banking services, investment consultation, 
governement services, travel services, interactive television, intermediary services such as 
25 charity collection services, and other types of services as well. Thus, the present invention 
has application not just in the sales arena but in many other contexts as well. The 
following description should be read with this in mind 

Referring to Fig. 1, the first step performed in any transaction is the verification 
step 20. Because the customer device is portable and thus may be lost, the verification 

30 step 20 is necessary to prevent fraudulent use of the portable device. The verification 

6 
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10 



process is twofold. First, the device itself is checked to determine whether it is a proper 
device for use in the incentive program. This is preferably done by having the portable 
device exchange encrypted signals with the base device. Second, the user of the device 
(the customer) is checked to determine whether he is a valid user. User verification is 
preferably performed by requiring that the user enter a user code and comparing the 
entered user code with a reference user code stored within the portable device. Only if 
both the portable device and the user are valid will a transaction between a customer and a 
provider be allowed to take place. The verification process has thus far been described " 
only in connection with the customer-carried device, but it should be noted that the same 
process may also be performed on the provider device. This is desirable where the 
provider device is also a portable device, which it is in the preferred embodiment of the 
present invention. 

After the devices and user are verified to be valid, an off-line transaction between 
the customer and the provider can commence. At this point, all applicable files stored on 
15 the customer device are opened for the purpose of processing and computing incentive 
credits. The transaction may be a purchase of a good or a service from the provider. From 
this transaction, a transaction amount is derived 22. Based at ;he transaction amount, and 
perhaps some other criteria such as the level of participation by multiple providers, the 
number of monthly transactions, and other programmable options, an incentive credit 
20 amount is computed 24. The incentive credit amount represents the amount of credits to 
be allocated to the customer from the present purchase. This incentive credit amount is 
not applicable to the present transaction but may be redeemed only in a future purchase. 
Thus, the customer has an incentive to enter into a future transaction with the same or 
another participating provider. 
25 The process of computing the incentive credit amount is a multi-step process. 

First, based on the transaction, an incentive code is derived from the base device. This 
incentive code is processed with an incentive program code stored within the provider 
device and a customer incentive code stored within the customer device to derive an 
incentive rate. Optionally, additional provider codes, which may be stored in the customer 

30 device and/or the base device, may be used to compute an augmented incentive rate which 

7 
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gives the customer an even greater discount. Thereafter, the incentive rate or the 
augmented incentive rate is applied to the transaction amount to derive the incentive credit 
amount Note that all three devices participate in the computation process. Confuting the 
incentive credit amount in this manner allows the specific needs of each of the parties to 
5 be taken into consideration. 

To elaborate, suppose that the transaction amount arises from the purchase of a 
television set A television set has a particular incentive code (stored in the base device) 
associated with it This incentive code is cross-referenced with the incentive program 
codes stored within the provider device. The provider may have a variety of incentive 
10 program codes stored in the provider device, with each code corresponding to a particular 
incentiveplan. Some of these plans may apply to electronic products such as television 
sets and some may apply to other types of products. By cross-referencing the incentive 
code with the incentive program codes, the plans which apply to the purchased product are 
ascertained. The applicable incentive program codes are thereafter cross-referenced with 
the customer incentive code and other applicable codes stored within the customer device 
to determine which specific incentive plan applies. For example, the customer may be a 
member of the "silver" plan so that the "sDver incentive plan" applies, and the customer " 
may have a manufacturer's rebated filed on his device. Once the applicable plan is 
ascertained, the incentive rate is derived and applied to the transaction amount to compute 
the incentive credit amount Note that computing the incentive credit amount in 
accordance with the process above allows each party to set forth its own individualized 
terms. That is, each provider may have its own customized schedule of incentive plans, 
and each customer may choose to participate in a specific plan. By allowing multiple 
parties to participate in the computation process, the specific terms set forth by each party 
can be taken into account. 

As a further example, the incentive credit amount may be computed in a slightly 
different manner. Instead of using codes to derive an incentive rate, the codes themselves 
may be incentive rates. For example, the incentive code from the base device may 
represent an incentive given by the manufacturer of the television set, the incentive 
program code in the provider device may represent the incentive offered by the provider, 
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and the customer incentive code in the customer device may represent an additional 
incentive to which the customer is entitled. The customer incentive code may also indicate 
what portion of the earned incentive credits should be contributed to a charity. Summing 
up all of these codes, along with codes from additional participating providers (optional), 
5 gives the total incentive rate applicable to the transaction amount The incentive credit " 
amount is computed using this incentive rate. This and other methods may be used for 
computing the incentive credit amount. The important point is that the incentive credit 
amount is preferably computed in a process which allows for multiple-party participation. ' 
Once the incentive credit amount is calculated, it is sent to the customer device to 
10 update 26 an incentive credit total stored in the customer device. The incentive credit total 
represents the number of incentive credits the customer has earned in the incentive 
program. The incentive credit total is updated by adding the incentive credit amount to the . ' 
total. Thereafter, information relating to the transaction is stored 28 in each of the devices. 
In the customer device, information such as the transaction amount, the incentive credit 
15 *ni OM t,menan^^ 

maintain a journal of all transactions made using the customer device. Similar information 
is stored in the provider device. In the base device, complete information relating to the 
transaction, including the identifications of the customer and the provider, the transaction 
amount, the incentive credits earned, the good or service purchased, and the customer's 
20 demographics are stored. 

After all of the relevant information is stored, the transaction is completed. In the 
course of a day, a plurality of transactions are probably conducted in the manner described 
above, with relevant information being stored at the end of each transaction. Atsome 
point after completion of the transactions (preferably at the end of the day), the transaction 
25 information stored in the base device is transmitted 30 to a record-keeping facility. Such a 
facility is utilized to coordinate the allocation and redemption of incentive credits among 
the various providers. The transmitted information is used for records posting and account 
reconciliation. At some point after the transactional information is posted with the record- 
keeping facility, the provider issuing the incentive credits makes a payment 32 to a trust 

30 account in an amount which is proportional to the incentive credit amount. Thus, for each 

9 
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incentive credit issued, a provider pays a certain amount into the trust account The funds 
accumulated in the trust account are used to compensate providers who redeem incentive 
credits. 

After incentive credits are earned, they may be redeemed in a subsequent 
5 transaction with a participating provider. The process of redeeming and/or further earning 
incentive credits is illustrated in Fig. 2. To redeem incentive credits, a customer enters 
into a second transaction with either the same provider or another participating provider. 
But before this second transaction may transpire, verification step 40 is performed. Step ' 
40 is identical to step 20 (Fig. 1) previously described, namely, step 40 verifies that the 
10 customer and provider devices are valid devices, and verifies that the user and provider are 
valid users of the devices. If the users and devices are valid, then a transaction is allowed 
to take place. A transaction amount is derived 42 from mis transaction. 

After the transaction amount is derived, the incentive credit total stored in the 
customer device is checked 44 to determine whether it has a zero value. If so, then there 
15 are no incentive credits to be redeemed. However, if the incentive credittotal is non-zero, 
the customer is queried 46 as to whether he wishes to redeem any incentive credits. If not, 
then the process continues on to step 52, but if the customer wishes to redeem some of his 
incentive credits, then at least a portion of the incentive credit total is applied 48 to the 
transaction amount to reduce the transaction amount by a discounted amount. The new 
20 adjusted amount (equal to the transaction amount minus the discounted amount) represents 
the amount, if any, now owed by the customer to the provider. After the 'incentive credits 
are redeemed, the incentive credit total stored in the customer device is reduced 50 by the 
number of incentive credits redeemed. 

After previously earned incentive credits are redeemed, the incentive credit amount 
25 earned in the current transaction may be computed 52. Computation step 52 is identical to 
computation step 24. After the incentive credit amount is calculated, the incentive credit 
total in the customer device is updated 54 to indicate the addition of the incentive credit 
amount. 

Thereafter, information relating to the transaction is recorded 56 in each of the 

30 devices. In the customer device, information such as the transaction amount, the incentive 

10 
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credit amount, the number of incentive credits redeemed, the name of the provider, and the 
product or service purchased is recorded to maintain a journal of all transactions made 
using the customer device. Similar information is stored in the provider device. In the 
base device, complete information relating to the transaction, including the identifications 
5 of the customer and the provider, the transaction amount, the incentive credits earned, the 
incentive credits redeemed, the good or service purchased, and the customer's 
demographics are stored. After all relevant informarioh is properly stored, the transaction 
is completed. 

At some point after the transaction is completed, the information stored in the base 
10 device is transmitted 58 to the record-keeping facmty for i«cord posting and account 
reconciliation purposes. Then, at some point after records are posted with the record- 
keeping facility, the provider settles accounts with the trust account In the transaction just 
completed, the provider both redeemed and allocated incentive credits. Thus, the provider 
will receive 60 from the trust account a payment in an amount proportional to the number 
1 5 of incentive credits redeemed, and will pay into the trust account an amount proportional 
to the incentive credit amount. Incentive credits are thus allocated and redeemed 
according to the method of the present invention. 

With reference to Fig. 3, there is shown a block diagram of a system 70 which may 
be utilized to implement the method of the present invention. System 70 preferably 
20 comprises a base device 72, a customer device 74, and a provider device 76. The customer 
and provider devices 74, 76 are both preferably portable devices which are coupled to the 
base device 72 through device interface 78. 

As shown in Fig. 3, customer device 74 preferably comprises a customer processor 
80 coupled to a read only memory (ROM) 82. ROM 82 contains within it a control 
25 program 84 which is executed by the processor 80 to carry out the operations required of 
the customer device. More will be said about the control program 84 in a subsequent 
section. Also coupled to the processor 80 is a random access memory (RAM) 86 and a 
non-volatile memory 88. RAM 86 is used as a scratch-pad memory for temporarily storing 
manipulated data while non-volatile memory 88 is used as a permanent memory for storing 
30 important information relating to the device 74. The information stored within non- 
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volatile memory 88 includes: (1) a reference user code; (2) an incentive credit total which 
represents the number of incentive credits that have been accrued; (3) one or more 
customer incentive codes; (4) incentive program data such as account information, 
customer device identification, and telephone numbers of control centers; (5) financial 
5 transaction data such as an available credit or debit amount, the identification of a financial 
institution, the account numbers within the institution, financial rules, and the telephone 
number of the institution; (6) demographics of the customer, and (7) information relating 
to past transactions carried out using the device. As mentioned previously, device 74 is ' 
preferably a portable device. In the preferred embodiment, customer device 74 takes the 
10 form of a processor card or a "smart card" as it is sometimes known in the art Card 74 
may be an International Standards Organization (ISO) type "78 16 IC card" or it may be a 
Personal Computer Memory Card International Association (PCMCIA) type card or it may 
be another type of card. The device interface 78 is preferably of the proper type to 
interface with the customer card 74. In the preferred embodiment, customer card 74 may 
15 be used for more than just implementing the incentive program. It may also be used as a 
debit card or a credit card to actually authorize payment of a transaction amount at the 
conclusion of a transaction. It is for this reason that financial transaction data is stored 
within the non-volatile memory 88. This aspect of device 74 will be elaborated upon in a 
later section. 

20 Like customer device 74, provider device 76 also preferably takes the form of a 

processor card. Provider card 76 may be of the ISO type, PCMCIA type, or some other 
type of processor card. Card 76 is preferably of the same type as card 74 so that they may 
both share a single device interface 78. As shown in Fig. 3, provider card 76 preferably 
comprises a provider processor 90, a ROM 92, a RAM scratch pad 96, and a non-volatile 

25 memory 98. The ROM 92 contains within it a control program 94 which is executed by 
the provider processor 90 to carry out the functions required of the provider device 76. 
The control program 94 will be described in a subsequent section. In provider device 76, 
non-volatile memory 98 is used as a permanent memory to store important information 
relating to the provider. This information includes: (1) incentive program data such as the 

30 provider's identification and telephone number; (2) a plurality of incentive program codes; 
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(3) a reference provider code; and (4) information relating to transactions carried out using 
the provider card 76. In short, non-volatile memory 98 stores the provider-specific 
information needed to carry out a transaction. 

The base device 72 of system 70 serves two major functions. First, it provides a 
5 mechanism for coordinating the interaction of the customer and provider devices 74, 76. 
Second, it provides a complete environment in which customer/provider transactions may 
be conducted. To carry out both of these function, base device 72 preferably comprises a 
base processor 100, memory 102, receipt printer 104, UPC code scanner 106, display 108, ' 
keyboard 1 ie|pmmumcations interface 1 12, security application module receptacle 1 14, 
10 and device interface 78. All of these components 102-1 14, 78 are coupled to the base 
processor 100 by a common bus 101. The keyboard 1 10 and display 108 serve as the main 
interface to the customer and operator of the base device, while the receipt printer 104 
provides a hard memorial of me transaction. The UPC scanner 106 serves as an input 
device for entering purchases into the base device while the communications interface 1 12 
15 serves as a link to a communications network to allow the base device 72 to contact the 
outside world. The security application module receptacle 1 14 of base device 72 is an 
optional feature. For certain customer and provider cards, sped? procedures may need to 
be carried out in order to verify that the cards are valid. For such cards, a security 
application module 1 14 may need to be incorporated into the base device 7£to perform the, 
20 special verification procedures. The security application module receptacle 1 14 may be 
used for incorporating such a module. 

The memory 102 of base device 72 is probably the most important component in 
the device because it contains within it a control program 103 which, when executed by 
base processor 100, causes the processor 100 to carry out all of the functions necessary to 
25 conduct a transaction. Under control of program 103, processor 100 coordinates the 
interaction of the various devices, interfaces with the customer and operator of the base 
device, and processes the transaction. In addition to storing program 103, memory 102 
may also be used to store information relating to the transaction. 

Base device 72 may be implemented using only the components thus far described; 

30 however, in the preferred embodiment, base device 72 further comprises a removable data 
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device (RDD) 1 16. Device 1 16, like the customer and provider devices 74, 76, is 
preferably a processor card which is coupled to the base processor 100 through device 
interface 78. RDD 1 16 preferably comprises a processor 1 18 coupled to a ROM 120, a 
RAM 124, and a non-volatile memory 126. ROM 120 contains a control program 122 
5 which, when executed by processor 1 1 8, controls the operation of the RDD 1 1 6. Non- 
volatile memory 126, meanwhile, is used to store information necessary for conducting 
transactions. Such information includes: (1) product codes; (2) product prices and 
descriptions; (3) incentive codes; and (4) information relating to each transaction. It is 
possible to incorporate the functions and information of the RDD 116 into the control 

10 program 103 and memory 102 of the base device 72 and to eliminate the RDD 1 16 

altogether. However, use of the RDD 1 16 is preferred because this allows base device 72 
to be updated quickly and easily. For example, product prices may be updated by simply 
inserting an updated RDD 1 1 6 into the base device 72 instead of altering the contents of 
memory 102. Likewise, different functionality may be imparted to the base device 72 by 

1 5 inserting a newly programmed RDD 1 1 6 into the device rather than by altering control * 
program 103. For the sake of convenience, RDD 1 16 is preferably included in the base- 
device. 

The system 70 of the present invention is preferably an interactive system, that is, 
all of the devices 72, 74, 76, 1 16 in the system 70 cooperate to conduct a transaction. 

20 Because the devices work together, and because the control programs 84, 94, 103, 122 
control the operation of the devices 72, 74, 76, 116, this means that the control programs 
are also interactive with each other. Since the control programs are interactive, their 
description is best understood if they are described in relation to one another. A flow 
diagram for the base control program 103 is provided in Figs. 4a-4d, a flow diagram for 

25 the customer control program 84 is provided in Fig. 5, a flow diagram for the provider 

control program 94 is provided in Fig. 6, and a flow diagram for the RDD control program 
122 is provided in Fig. 7. The operation of system 70 will be described with reference to 
these figures. 

The operation of system 70 commences with an initialization process 130 carried 
30 out by the base processor 100. The initialization step, which is usually performed after an 
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initial power-up, is illustrated in greater detail in Fig. 8, wherein the first step in the 
process is to reset 220 all counters, registers, and devices in the base device 72. After the 
reset procedure, base processor 100 sends a prompt to the display 108 to request 222 the 
insertion of a RDD 1 16. After the operator of the base device 72 complies with this 
5 request, base processor 100 initiates a verification process with the RDD 1 1 6 by 

generating and sending 224 a set of encrypted signals to the RDD 1 16. These signals pass 
from processor 100 to the RDD 1 16 via device interface 78. Hereinafter, it will be 
understood that signals pass between the base processor 100 and the devices 74, 76, 1 16 
via the device interface 78. The RDD processor 1 18 responds by receiving 320 (Fig. 7) 
10 and decrypting the encrypted signals and, in turn, generating 322 and sending a set of 
encrypted signals of its own to the base processor 100. Base processor 100 receives and 
decrypts 226 (Fig. 8) these signals to determine whether the RDD is a valid device for use 
in a transaction. Preferably, all of the devices for use in the same incentive program are 
programmed with the same set of encryption and decryption keys so that the various 
15 devices can recognize each other. If base processor 100 determines 228 that the RDD 1 16 
is not a valid device for use in a transaction, it ejects the inserted RDD and requests 
another one. On the other hand, if the RDD is valid, the initialization process is continued. 

Base processor 100 next sends a prompt to the display 108 to request 230 insertion 
of a provider card 76. After a card is inserted, base processor 100 generates and send 232 
20 another set of encrypted signals, this time, to the provider device 76. Provider processor 
90 responds by receiving and decrypting 290 (Fig. 6) the encrypted signals, and generating 
and sending 292 its own set of encrypted signals. Base processor 100 receives and 
decrypts 234 (Fig. 8) these signals and, based on the decryption result, determines 236 
whether the provider card 76 is a valid device. If invalid, the provider card is ejected and 
25 another card is requested. However, if the provider card is valid, then control is 

transferred to the provider card 76. Provider processor 90 accepts control and sends 294 
(Fig. 6) a prompt to the display 108 requesting that the provider enter a provider code. The 
provider code is entered through the keyboard 1 10 and sent to the provider processor 90. 
Provider processor 90 compares 296 the entered code with a reference provider code 
30 stored in non-volatile memory 98 to determine 298 whether the entered code is valid. If 
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invalid, another request is sent to the display, but if the entered code is valid, then control 
is transferred back to the base processor. The initialization process is thus completed. The 
system 70 is now ready to accept a customer card to commence a transaction. 

Referring again to Fig. 4a, after initialization, base processor 100 sends a prompt to 
5 thedisplay 108 to request 132 the insertion of a customer card. Upon insertion, base 
processor 100 generates and sends 134 a set of encrypted signals to the customer card. 
The customer processor 80 receives and decrypts 240 (Fig. 5) the encrypted signals, and 
responds by generating and sending 242 a set of encrypted signals to the base processor ' 
100. The base processor 100 receives and decrypts 136 (Fig. 4a) these signals and 
10 determines 138 whether the customer card 74 is a valid device. If nc^ me inserted card is 
ejected andanother request is sentto the display 108. However, if the card is a valid 
device, then control is transferred to the customer card 74. The customer processor 80 
accepts control and sends 244 (Fig. 5) a prompt to the display 108 requesting the insertion 
of a user code by the customer. The requested user code, entered through keyboard 1 10, is 
15 received by the customer processor 80 and compared 246 to the reference user code stored 
in the non-volatile memory 88. If the codes do not match 247, then customer processor 80 
requests that another user code be entered. However, if the entered user code is valid, then 
customer processor 80 proceeds to step 506. 

Step 506 serves as an extra security check for ensuring that the customer is not 
20 using a lost or stolen customer card. In step 506, customer processor 80 checks for certain 
indications of possible fraudulent use. To elaborate, processor 80 determines whether the 
current transaction is the first transaction made using the customer card in a long period of 
time (a month, for instance). This might indicate that the card was lost and is now being 
used by an unauthorized user. Processor 80 also determines whether the current 
25 transaction amount is unusually high or exceeds a certain preset limit. In addition, 

processor 80 determines whether there has been an unusually large number of transactions 
conducted using the card. Processor 80 may check for other indications of possible 
fraudulent use of the customer card. Customer processor 80 has access to all of me 
information necessary for making the above determinations since information relating to 

30 past transactions made using the customer card is stored in non-volatile memory 88. If 
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none of the above criteria are met, customer 80 transfers control back to base processor 
100. However, if any of the above conditions is satisfied, customer processor 80 generates 
and sends 508 an on-line control signal to the base processor 100. Customer processor 80 
further sends 510 control center information and customer card identification information 
5 to the base processor 100. The base processor 100 receives 139 (Fig. 4a) the control and 
information signals and, if the on-line control signal is active 140, processor 100 enters 
141 into selective on-line mode to contact a common control center for further 
information, while processing all other functions off-line. 

The selective on-line mode of operation is illustrated in detail in Fig. .9. Base 
10 processor 100 begins operation in this mode by <tetermining 350 whether fraud detection is 
the reason for invoking this mode of operation. If so, base processor 100 uses the control 
center information received from customer processor 80 to establish 352 a 
communications link with the control center via communications interface 1 12. After the 
link is established, base processor 100 sends the customer card identification information 
15 to the common control center. The control center uses this identification information to 
(fetermine whether the customer card 74 has been reported lost or stolen. If the customer 
card 74 is not lost or stolen, no action is taken and the customer card is allowed to 
participate in a transaction. However, if the customer card is determined 356 to have been 
lost or stolen, base processor 100 generates and sends 358 a deactivation signal to the 
20 customer device 74. Customer processor 80 receives this deactivation signal and, if the 
signal is active 512, customer processor 80 deactivates 514 the customer device 74 so that 
the device 74 can no longer be used to conduct the current transaction or any other future 
transaction. Thus, once a customer card is determined to be lost or stolen, it is deactivated 
to preclude the possibility of any future fraudulent use. This is in sharp contrast to 
25 magnetic stripe cards which cannot be deactivated. If a customer card is deactivated, base 
device 72 ejects the card and loops back to step 132 (Fig. 4a) to request another customer 
card. 

If it is determined that all devices and users are valid, a transaction is commenced. 

Base processor 100 begins a transaction by receiving 142 a product or service code. This 

30 product code may be scanned in by way of UPC scanner 1 06 or it may be entered through 
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the keyboard 1 10. Base processor 100 sends 144 this product code to the RDD 1 16 for 
processing. Upon receiving the product code, RDD processor 118 processes 326 (Fig. 7) 
the code to derive a product price, a product description, and an incentive code associated 
with the product. This step 326 is preferably carried out by performing a table look-up* 
5 procedure through the non-volatile memory 126 where this information is stored. Once 
the information is found, RDD processor 1 18 sends 327 the information to the base 
processor 100. In response, base processor 100 receives 146 (Fig. 4a) the information, 
sends 148 it to the receipt printer 104 for printing, and stores 1 50 it temporarily in the 
memory 102. Thereafter, base processor 100 sends a prompt to the display 108 inquiring 
10 152 whether more purchases are forthcoming. If more purchases are forthcoming, steps 
142-150 are repeated. Note that the incentive code and the price for each product 
purchased is stored in memory 102. This information will be used subsequently when the 
incentive credit amount is computed. After all items are purchased, base processor 100 
sums up all of the product prices to derive 154 a transaction amount This transaction 
15 amount represents a subtotal of the items purchased. 

After the transaction amount is derived, base processor 100 determines 156 
whether the customer card 74 has any incentive credits to redeem. Base processor 1 00 
makes this determination by checking the status of a control signal from customer 
processor 80. The status of this control signal depends upon the incentive credit total 
20 stored in the customer device non-volatile memory 88. In step 250 (Fig. 5), the customer 
processor 80 checks 250 the incentive credit total stored in non-volatile memory 88, and if 
this total is non-zero, then customer processor 80 generates and sends 252 a control signal 
to the base processor 100 to indicate the presence of redeemable incentive credits. 
Otherwise, no control signal is generated Preferably, customer processor 80 provides only 
25 an indication of whether there are redeemable credits stored in non-volatile memory 88. 
Base processor 100 preferably is given no access to how many incentive credits are 
actually stored therein. This allows the incentive credit amount to remain private. 

If the control signal from customer processor 80 indicates no redeemable incentive 
credits, then base processor 100 skips over the redemption steps 158-176. However, if 
30 there are redeemable credits, base processor 100 requests 158 a maximum redeemable 
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amount from RDD 1 16. The RDD processor 1 18 receives 328 (Fig. 7) this query'and 
calculates 330 a maximum according to a predetermined set of rules. These rules may take 
into account a plurality of factors. For example, perhaps only a certain amount of 
incentive credits may be applied towards a particular type of product. Perhaps some of the 
5 products may not be purchased at all using incentive credits. These rules may be set by the 
participants in the incentive program. After calculating this maximum amount, RDD 
processor 1 1 8 sends 332 the maximum to the base processor 100. 

In response, base processor 100 sends 160 (Fig. 4b) the maximum amount to the ' 
display 108 to be shown thereon. This informs the customer of how many incentive 
10 credits he may redeem. Thereafter, base processor 100 sends 162 a prompt to display 108 
to ask the customer how many incentive credits he wishes to redeem. In response, the 
customer enters the desired number through keyboard 1 10 and this number is received by 
base processor 100. Base processor 100 then determines 164 whether the entered aibount 
exceeds authorized limits. There may be limits imposed on how many credits may be 
15 redeemed in one transaction or there may be other limits. If any one or a combination of 
these limits is exceeded, base processor 100 enters 166 into selective on-line mode to 
obtain further authorization. This aspect of the selective on-line mode of operation will be 
described in a later section. Where no limits are exceeded, base processor 100 applies the 
desired number of incentive credits to the transaction amount to reduce 170 the transaction 
20 amount by a discounted amount Preferably, the discounted amount is equal to the number 
of incentive credits redeemed. Thereafter, the number of incentive credits redeemed is 
sent 172 to the customer card 74. The customer processor 80 receives 254 (Fig. 5) this 
number and reduces 256 the incentive credit total stored in non-volatile memory 88 by this 
number. After sending the number of redeemed credits to the customer card 74, base 
25 processor 1 00 sends 1 74 the redemption information to the receipt printer 1 04 for printing 
therefrom, and sends 176 the same information to memory 102 for storage therein. The 
redemption process is thus completed. 

After the redemption process comes the incentive credit allocation process. Base 
processor 100 begins this process by retrieving 178 from the memory 102 the incentive 

30 code for one of the products purchased in the current transaction. Recall that the incentive 
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codes for all of the purchased products were previously stored in memory 102; thus, this 
information is readily available to base processor 100. Base processor 1 00 submits 180 
this incentive code to both the customer card 74 and the provider card 76. The customer 
processor 80 receives 258 (Fig. 5) this incentive code and processes 260 it to derive a 
5 customer incentive code. This step is preferably implemented by performing a table look- 
up procedure through the non-volatile memory 88 where the customer incentive code 
information is stored. Customer processor 80 then sends 261 the derived customer 
incentive code to the base processor 100 for processing. Similarly, provider processor 90 ' 
receives 300 (Fig. 6) the incentive code and processes 302 it to derive incentive program 
10 codes. Provider processor 90 preferably derives these codes by performing a table, look-up 
procedure through non-volatile memory 98 where the incentive programs codes are stored. 
After retrieving the codes, provider processor 90 sends the codes to the base processor 100 
for processing. 

The base processor 100 receives 182 (Fig. 4c) the customer incentive code, other 

15 applicable incentive codes, and the incentive program codes and processes 1 84 them to 

derive an incentive rate. Preferably, this processing step is performed as previously 

described using either a cross-referencing or a suinrning approach. Once the incentive rate 

is obtained, it is applied to the purchase price (which is also stored in memory 102) of the 

purchased product to compute 186 the individual incentive credit amount attributable to 

20 that product Thereafter, base processor 100 checks 187 the memory 102 for more 

incentive codes from the current transaction. For each incentive code, an individual 

incentive credit amount is computed. When all of the incentive codes have been 

processed, base processor sums up 188 all of the individual incentive credit amounts to 

derive an overall incentive credit amount This amount is tested 189 by base processor 

25 100 to determine whether it exceeds some authorized limit. It may be that only a certain 

maximum amount of incentive credits may be earned in any one transaction and that this 

amount exceeds that limit If an authorized limit is exceeded, then base processor 100 

enters 190 into selective on-line mode. This aspect of the selective on-line mode of 

operation will be described in a subsequent section. Otherwise, the incentive credit 

30 amount is sent 194 to the customer card 74. Customer processor 80 receives 262 (Fig. 5) 
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this amount and, in response, updates 264 the incentive credit total stored in non-volatile 
memory 88 by adding the incentive credit amount to the incentive credit total. Thereafter, 
base processor 100 sends 196 (Fig. 4c) the incentive credit amount to the receipt printer 
104 for printing therefrom and sends the same amount to the memory 102 for storage 
5 therein. The incentive credit allocation process is now completed. 

The final phase of the transaction is the payment phase. Base processor 100 begins 
this phase by computing 199 the adjusted amount, which represents the difference between 
the transaction amount and the discounted amount. Then, base processor 100 sends a 
prompt to display 108 to ask 200 the customer what form of payment he desires. The 
10 answer to this prompt is entered via the keyboard and sent to the base processor 100. It 
was mentioned previously that, in the preferred embodiment, customer card 74 may be 
used as a debit card or a credit card to authorize payment. If this option is chosen 202, 
base processor 100 sends 204 the adjusted amount to the customer card 74. Otherwise, 
processor 100 checks for payment authorization. 
15 If the customer card is to be used for payment, the customer processor 80 receives 

267 (Fig. 5) the adjusted amount and processes 268 payment of the amount in accordance 
with the financial data and rules stored in non-volatile memory 88. When used as a debit 
card, there is typically sufficient information and authorization stored on the customer card 
to cany out payment off-line. In some instances, however, such as when the customer card 
20 74 has insufficient resources to authorize the payment of the adjusted amount, further 
authorization or resource reallocation is needed. To obtain the authorization or resource 
reallocation, customer processor 80 contacts 272 the financial institution whose 
information is stored in non-volatile memory 88. This is preferably achieved by retrieving 
the phone number of the financial institutions control center from memory 88 and using 
25 communications interface 1 12 to establish a communications link with the control center. 
Then, by communicating with the control center, customer processor 80 receives 274 
further instructions and information. As a result of this communication, processor 80 may 
obtain payment authorization or it may receive instructions to terminate the transaction 
without payment. 
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As mentioned above, the. customer card may also be used as a credit card. 
Currently, credit card companies require that on-line authorization be obtained for most 
transactions. Thus, when customer card 74 is used as a credit card, a communications link 
is established with an appropriate authorizing entity to obtain payment authorization. This 
5 is preferably achieved by retrieving the phone number of the authorizing entity from 
memory 88 and using communications interface 1 12 to establish a communications link 
with the common control center. Then, by communicating with the authorizing entity, 
customer processor 80 can obtain the proper payment authorization. 

Referring again to Fig. 4d, if payment authorization is received 206 by base 
10 processor 100, then the payment is carried out But, if payment is not authorized, base 
processor 100 prompts the customer for another form of payment Once the payment is 
authorized, all relevant transaction information is stored 208 in memory 102; This 
includes requesting and receiving demographics information from the customer device 74. 
Thereafter, base processor 100 sends 210 relevant transaction information to each of the 
15 devices 74, 76, 1 16 to allow each device to maintain in its non-volatile memory a journal 
of all transactions made using that device. After step 210, the transaction is tenninated 
212. 

The operation described above is repeated for each transaction. During the course 
of a day, many transactions are conducted as off-line transactions. Information pertaining 

20 to all of these transactions is retained in memory 102. Preferably, at the end of a day, or 
some other period, data from memory 102 is transmitted to a record-keeping facility for 
records posting and account reconciliation. Base device 72 performs this procedure by 
first establishing a communications link with the record-keeping facility using 
communications interface 1 12, and then sending all of the transaction information stored 

25 within memory 102 to the facility. After transmitting the stored information, base device 

72 is ready for another day of transactions. 

In system 70, substantially all transactions are carried out off-line. However, there 

may be instances, such as where certain redemption or allocation limits are exceeded, in 

which the devices 72, 74, 76 lack the information or authorization to follow through with a 

30 transaction. In such instances, the selective on-line mode of the base processor is invoked. 
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The fraud detection aspect of this operational mode was described previously. The 
authorization and information acquisition aspect of the selective on-line mode will now be 
described. With reference to Fig. 9, authorization and information acquisition begins with 
retrieving 400 control center information from one of the devices 74, 76, 1 16. Which 
5 device holds this information is a function of the additional information or authorization 
needed. Using this information and communications interface 1 12, base processor 100 
establishes 402 a link with a common control center. Then, processor 100 requests 
authorization from the center for a specified operation. Where authorization is given, 
processing simply continues. However, where authorization is not obtained, base 
10 processor 100 receives 406 from the control center additkmal information and instructions. 
These instructions may order the processor 100 to limit the number of incentive credits 
that may be redeemed or allocated, or they may order the processor 1 00 to proceed with a 
certain operation. Base processor 100 processes 408 these instructions to carry out the 
desired functions. 

1 5 Each time base processor 100 invokes the on-line mode of operation, the common 

control ccn tv is given the opportunity to update the contents of RDD 1 16. If base 
processor 100 determines 360 that the control center wishes to update RDD 1 1 6, base 
processor 100 generates and sends 364 an update control signal to the RDD 1 16. RDD 
processor 118 monitors 500 for this update control signal and, if the signal is active, RDD 

20 processor 1 18 receives 502 update instructions from the control center via communications 
interface 1 12 and processes 504 these instructions to implement the update. In this 
manner, a control center can keep the contents of the RDD 1 16 and hence, the base device 
72, current. The selective on-line mode of the present invention is an advantageous feature 
because it allows routine decisions to be made by the customer, provider, and devices 

25 while, at the same time, providing a means for selectively contacting a common control 
center when difficult decisions arise, without interrupting the performance of other off-line 
functions. With this feature, the system of the present invention is able to offer the 
advantages of both an off-line system and an on-line system. 
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What is claimed is: - 

1 . A method for conducting transactions, comprising the steps ofc 
deriving a transaction amount from an off-line transaction between a customer and 

a first provider, 

5 computing an incentive credit amount based on said transaction amount; 

incrementing an incentive credit total stored on a customer-carried, portable 
storage device by said incentive credit amount; and 

recording information relating to said transaction, including said incentive credit 
amount, in a first base device. 

10 

2. The method of claim 1 , further comprising the step of: 

prior to said deriving step, verifying that said portable storage device is a valid 
device for use in said transaction. 

15 3. The method of claim 1, further comprising the step of: 

recording information relating to said transaction in said portable storage device to 
maintain a journal of all transactions made using said portable storage device. 

4. The method of claim 1 , wherein the computing step comprises the steps of: 
20 deriving an incentive code for said transaction amount; 

processing said incentive code with a customer incentive code stored in said 
portable storage device and a program incentive code stored in a provider storage device, 
to derive an incentive rate; and 

applying said incentive rate to said transaction amount to derive said incentive 
25 credit amount 

5. The method of claim 1 , further comprising the step of: 
transmitting the information stored in said first base device to a record-keeping 

facility after said transaction is completed. 

30 

24 



WO 95/21428 



PCT/US95/6fi3l 



10 



6. The method of claim 5, further comprising the step of: 

paying, by said first provider, an amount proportional to said incentive credit 
amount into a trust account. 

7. The method of claim 1 , further comprising the steps of: 

deriving a second transaction amount from a subsequent off-line transaction 
between said customer and a second provider; 

applying a selected number of incentive credits to said subsequent transaction, 
thereby reducing said second transaction amount by a discounted amount; 

aecrementing said incentive credit total stored in said portable storage device by 
said selected number of incentive credits; and 

recording information relating to said second transaction, including said discounted 
amount, in a second base device. 

8. The method of claim 7, further comprising the step of: 
transmitting the information stored in said first and second base devices to a 
record-keeping facility after said subsequent transaction is completed. 



9. The memol of clam 8, farmer 
20 paying, by said first provider, an amount proportional to said incentive credit 

amount into a trust account; and 

receiving, by said second provider from said trust account, payment in an amount 
proportional to said discounted amount. 
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10. The method of claim 7, wherein said first and second providers are the 
same entity. 

1 1. The method of claim 7, wherein said first and second base devices are the 
same device. 
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12. A method for conducting transactions, comprising the steps of: 
deriving a transaction amount from an off-line transaction between a customer and 
a provider; 

determining whether an incentive credit total stored in a customer-carried, portable 
5 storage device has a non-zero value; 

in response to a detemunation that said incentive credit total has a non-zero value, 
deterauning whether said customer wishes to apply any incentive credits to said 
transaction amount; 

in response to a determination that said customer wishes to apply incentive credits 
10 to said transaction amount, applying a selected number of incentive credits to said 
transaction amount, thereby reducing said transaction amount by a discounted amount; 

decrementing said incentive credit total stored in said portable storage device by 
said selected number of incentive credits; 

computing an incentive credit amount to allocate to said customer, 
15 incrementing the incentive credit total stored in said portable storage device by said 

incentive credit amount; and 

recording information relating to said transaction, including said discounted 
amount and said incentive credit amount, in a base device. 
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13. The method of claim 12, further comprising the step of: 

prior to said deriving step, verifying that said portable storage device is a valid 
device for use in said transaction. 

14. The method of claim 12, further comprising the step of: 

recording information relating to said transaction in said portable storage device 
maintain a journal of all transactions made using said portable storage device. 



to 



15. The method of claim 12, wherein the computing step comprises the 



steps 



of: 



30 deriving an incentive code for said transaction amount; 
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processing said incentive code with a customer incentive code stored in said 
portable storage device and an incentive program code stored in a provider storage device 
to derive an incentive rate; and -• ' 

applying said incentive rate to said transaction amount to derive said incentive 
5 credit amount 

16. The method of claim 12, further comprising the step of: 

transmitting the information stored in said base device to a record-keeping facility * 
after said transaction is completed. 

10 

17. The method of claim 16, further comprising the step of: 
receiving payment in an amount proportional to said discounted amount 

18. The method of claim 17, further comprising the step of: 

15 paying into a trust account an amount proportional to said incentive credit amount 

19. A system for conducting transactions, comprising: 

a customer-carried portable device comprising a customer memory having an 
incentive credit total stored therein; 

20 a provider device comprising a provider memory; and 

a base device operatively coupled to said portable device and said provider device, 
said base device comprising a base processor for deriving a transaction amount from an 
off-line transaction conducted between a customer and a provider and computing an 
incentive credit amount based on said transaction amount, said base processor sending said 

25 incentive credit amount to said portable device for updating the incentive credit total 

stored in said customer memory, and sending said incentive credit amount to said provider 
device for storage within said provider memory. 



20. The system of claim 19, wherein said customer memory has a customer 

30 incentive code stored therein and said provider memory has at least one incentive program 
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code stored therein, wherein said base device further comprises a base memory coupled to 
said base processor having a plurality of incentive codes stored therein, and wherein said 
base processor computes said incentive credit amount by retrieving an incentive code from 
said base memory, retrieving said customer incentive code from said customer memory, 
5 retrieving said incentive program code from said provider memory, processing said *' 
incentive code with said customer incentive code and said incentive program code to' " 
derive an incentive rate, and applying said incentive rate to said transaction amount to 
derive said incentive credit amount 

10 21. The system of claim 19, wherein said portable device further comprises a 

customer processor coupled to said customer memory, said customer processor receiving 
said incentive credit amount from said base processor and updating the incentive credit 
total stored in said customer memory by adding said incentive credit amount to said 
incentive credit total. 

15 

22. The system of claim 19, wherein said portable device further comprises a 
customer processor coupled to said customer memory, and wherein said system further 
comprises an input device coupled to said portable device, said customer processor 
receiving a user code from said input device and comparing said code to a reference user 

20 code stored in said customer memory to determine whether said user code is valid. 

23. The system of claim 19, wherein said portable device further comprises a 
customer processor coupled to said customer memory, said customer processor sending 
and receiving encrypted signals to and from said base processor to verify that said base 

25 device and said portable device are valid devices for use in said transaction. 

24. The system of claim 19, wherein said provider device further comprises a 
provider processor coupled to said provider memory, and wherein said system further 
comprises an input device coupled to said provider device, said provider processor 
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receiving a provider code from said input device and comparing said code to a reference 
provider code stored in said provider memory to determine whether said user code is valid. 

25. The system of claim 19, wherein said provider device further comprises a 
5 provider processor coupled to said provider memory, said provider processor sending and 

receiving encrypted signals to and from said base processor to verify that said base device 
and said provider device are valid devices for use in said transaction. 

26. The system of claim 19, wherein said portable device further comprises a 
10 customer processor coupled to said customer memory and wherein said system further . 

comprises a communications interface, said customer processor determining whether to 
authorize payment of said transaction amount and, in response to a determination not to 
authorize payment, said customer processor communicating with a financial institution via 
said communications interface to obtain payment authorization therefrom. 

15 

27. The system of claim 19, wherein said system further comprises a 
communications interface, and wherein said base processor determines whether sufficient 
authorization exists within said system to complete said transaction, and in response to a 
determination that additional authorization is needed, said base processor communicating 

20 with a control center via said communications interface to obtain additional authorization 
therefrom. ' 



28. The system of claim 19, wherein said base device further comprises a base 
memory coupled to said base processor, and wherein said base processor stores 
25 information relating to said transaction, including said incentive credit amount, in said 
base memory. 



29. The system of claim 27, wherein said base device further comprises a 
communications interface coupled to said base processor, and wherein said base processor 
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transmits the infonnation stored in said base memory to a record-keeping facility via said 
communications interface after said transaction is completed. 

30. The system of claim 19, wherein said base device further comprises a 

5 communications interface coupled to said base processor, and wherein said base processor 
communicates with a control center via said communications interface to determine 
whether said portable device is a valid device, and in response to a determination that said 
portable device is an invalid device, said base processor sending a deactivation signal to 
said portable device to deactivate said portable device. 

10 

31. The system of claim 30, wherein said portable device further comprises a 
customer processor coupled to said customer memory, and wherein said customer 
processor receives said deactivation signal and responds by deactivating said portable 
device. 

15 

32. A system for conducting transactions, comprising: 

a customer-carried portable device comprising a customer memory having an 
incentive credit total stored therein and a customer processor coupled to said customer 
memory, said customer processor generating a control signal when said incentive credit 
20 total has a non-zero value; 

a provider device comprising a provider memory; and 

a base device operatively coupled to said portable device and said provider device, 
said base device comprising a base processor for deriving a transaction amount from an 
off-line transaction conducted between a customer and a provider, said base processor 
25 receiving and responding to said control signal by applying a selected number of incentive 
credits to said transaction amount to reduce said transaction amount by a discounted 
amount, said base processor sending said selected number of incentive credits to said 
portable device for updating said incentive credit total, said base processor further 
computing an incentive credit amount based on said transaction amount and sending said 

30 incentive credit amount to said portable device for further updating said incentive credit 
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total, said base processor sending said incentive credit amount and said discounted amount 
to said provider device for storage within said provider memory. 

33. The system of claim 32, wherein said customer memory has a customer 
5 incentive code stored therein and said provider memory has at least one incentive program 
code stored therein, wherein said base device further comprises a base memory coupled to 
said base processor having a plurality of incentive codes stored therein, and wherein said 
base processor computes said incentive credit amount by retrieving an incentive code from 
said base memory, retrieving said customer incentive code fiom said customer memory, 
10 retrieving said incentive program code from said provider memory, processing said 
incentive code with said customer incentive code and said incentive program code to 
derive an incentive rate, and applying said incentive rate to said transaction amount to 
derive said incentive credit amount. 

15 34. The system of claim 32, wherein said customer processor receives said 

selected number of incentive credits and updates the incentive credit total stored in said 
customer memory by subtracting said selected number of incentive credits from said 
incentive credit total. 

•0 35. The system of claim 32, wherein said customer processor receives said 

incentive credit amount from said base processor and updates the incentive credit total 
stored in said customer memory by adding said incentive credit amount to said incentive 
credit total. 

5 36. The system of claim 32, wherein said system further comprises an input 

device coupled to said portable device, and wherein said customer processor receives a 
user code from said input device and compares said code to a reference user code stored in 
said customer memory to determine whether said user code is valid. 
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37. The system of claim 32, wherein said customer processor sends and 
receives encrypted signals to and from said base processor to verify that said base device 
and said portable device arc valid devices for use in said transaction. 

5 38. The system of claim 32, wherein said provider device further comprises a 

provider processor coupled to said provider memory, and wherein said system further 
comprises an input device coupled to said provider device, said provider processor 
receiving a provider code from said input device and comparing said code to a reference ' 
provider code stored in said provider memory to determine whether said user code is valid. 

10 

39. The system of claim 32, wherein said provider device further comprises a 
provider processor coupled to said provider memory, said provider processor sending and 
receiving encrypted signals to and from said base processor to verify that said base device 
and said provider device are valid devices for use in said transaction. 

15 

40. The system of claim 32, wherein said system further comprises a 
communications interface, and wherein said customer processor determines whether to 
authorize payment of said transaction amount and, in response to a determination not to 
authorize payment, said customer processor communicates with a financial institution via 

20 said communications interface to obtain payment authorization therefrom. 



41. The system of claim 32, wherein said system further comprises a 
communications interface, and wherein said base processor determines whether sufficient 
authorization exists within said system to complete said transaction, and in response to a 

25 determination that additional authorization is needed, said base processor communicates 
with a control center via said communications interface to obtain additional authorization 
therefrom. 

42. The system of claim 32, wherein said base device further comprises a base 

30 memory coupled to said base processor, and wherein said base processor stores 
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infonnation relating to said transaction, including said incentive credit amount, in said 
base memory. 

43. The system of claim 42, wherein said base device further comprises a 

5 communications interface coupled to said base processor, and wherein said base processor 
transmits the information stored in said base memory to a record-keeping facility via said 
communications interface after said transaction is completed. 

44. The system of claim 32, wherein said base device further comprises a 

10 communications interface coupled to said base processor, and wherein said base processor 
communicates with a control center via said communications interface to determine 
whether said portable device is a valid device, and in response to a determination that said 
portable device is an invalid device, said base processor sendes a deactivation signal to 
said portable device to deactivate said portable device. 



15 



45. The system of claim 44, wherein said customer processor receives said 
deactivation signal and responds by deactivating said portable device. 
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